EUVD-2026-67777

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

EUVD-2026-43001

Snipe-IT's import createdby can be overwritten...

CVE-2022-44830

Suggested description Die Sourcecodester Event Registration App v1.0 weist mehrere CSV-Injection-Schwachstellen über die Felder First Name, Contact und Remarks auf. Diese Schwachstellen ermöglichen es Angreifern, über eine präparierte Excel-Datei beliebigen Code auszuführen. Additional Informatio...

CVE-2024-11396

CVE-2024-11396 Event Monster = 1.4.3 - Esposizione di informazioni tramite l'esportazione della lista dei visitatori Descrizione Il plugin Event Monster – Event Management, Tickets Booking, Upcoming Event per WordPress è vulnerabile all'esposizione di informazioni in tutte le versioni fino alla...

Security_Article

SecurityArticle sito web scrapy, Articolo e link ... 0x01 Nuovo progetto 0x02 Definire l'obiettivo 0x03 Creare il crawler 0x04 Salvare i contenuti es. pip3 install lxml,scrapy root@kitploit: 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text...

import-users-from-csv-with-meta

import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - Exportação Não Autorizada de Usuários Autenticados...

ninja-forms-brute

Ninja Forms 3.6.8 - Offenlegung von E-Mail-Adressen ohne Authentifizierung Beschreibung Das Plugin löscht die temporären Dateien nicht, die beim Exportieren von Einsendungen erstellt werden, was es nicht authentifizierten Angreifern ermöglichen könnte, sie herunterzuladen und an sensible...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Nicht authentifizierte SQL-Injection Beschreibung Das Navayan-CSV-Export-Plugin für WordPress ist in Versionen bis einschließlich 1.0.9 anfällig für SQL-Injection, da der vom Benutzer bereitgestellte Parameter unzureichend maskiert wird und die bestehen...

BurpImportSitemap

Estensione Import To Sitemap Import To Sitemap è un'estensione per Burp Suite per importare file CSV di wstalker o file di esportazione di ZAP nella Sitemap di Burp. Include anche un menu contestuale per inviare elementi richiesta/risposta da qualsiasi scheda alla sitemap. Licenza Rilasciato come...

burp-reflux

Parser del log reflux di Burp Proxy: convertitore di log di testo Burp proxy in CSV e SQLLite Reflux per l'analisi e la conversione dei log Burp Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

CVE-2026-81728

Dolibarr before 24.0.0 is affected by a SQL injection in its CSV/XLSX import wizard. The updatekeys parameter in htdocs/imports/import.php is filtered only by alphanohtml, which strips HTML but leaves SQL metacharacters intact. In import_insert() (import_csv.modules.php), submitted values are con...

CVE-2026-81728 Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-56652

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

EUVD-2026-67128

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2026-56652

Dool (versions up to 1.3.8 ) is affected by a CSV injection vulnerability in its CSV export functionality. The tool fails to sanitize cell content beginning with special formula characters (=, +, -, or @), allowing a local attacker to craft a process name starting with one of these characters, th...

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

SearchIPOwner

SearchIPOwner - h3x0v3rl0rd - Exemplo de uso: Consulta de IP único: root@kitploit: python3 SearchIPOwner.py 8.8.8.8 Vários IPs de um arquivo: root@kitploit: python3 SearchIPOwner.py iplist.txt Salvar em CSV: root@kitploit: python3 SearchIPOwner.py iplist.txt -csv...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Exploit di escalation dei privilegi Cisco SD-WAN ⚠️ AVVERTENZA Questo codice è SOLO per scopi educativi e test di sicurezza autorizzati. 📋 Descrizione CVE-2026-20245 è una vulnerabilità di escalation dei privilegi nella CLI di Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalys...